Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: Fj7M4BLt1Vy1gVSLmeQkyVzSUq+nlF4bHuMQqodV/4Q=
Subject key identifier: DE:A7:E3:24:FF:27:6F:36:02:F5:E9:3B:2D:20:A0:67:86:E0:A2:08
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 0194BD17C5C9945A428E7C20133305829FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: 6FcAXGPFyATrRNswBPv/xmtjqbve0DWSFxC2qwE5Qnc=)
2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c5:c9:94:5a:42:8e:7c:20:13:33:05:82:9f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=dea7e324ff276f3602f5e93b2d20a06786e0a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:5a:32:0e:af:48:ff:0d:95:35:0a:f6:45:
e1:e8:65:65:13:8f:5b:37:a9:49:8f:18:ed:c7:15:
27:eb:92:bc:bb:e9:ef:cd:1f:70:26:83:b9:a3:3a:
5d:46:69:49:af:6b:90:e1:2d:98:69:d6:fc:9b:b7:
73:92:a5:37:fb:4c:c5:be:31:c1:95:80:5a:ea:3e:
c1:8b:0f:94:ae:b2:70:b5:bb:7b:fb:36:c7:6e:e5:
d5:4d:52:a5:54:af:10:2b:a9:63:c8:e4:4c:3b:2e:
24:21:53:ff:bc:96:bd:8d:59:f0:59:03:7f:d7:3b:
3a:15:75:78:ea:51:14:06:2d:c8:ac:af:5d:7e:c3:
3c:7a:d0:59:7f:22:d8:64:72:a2:89:b1:85:19:3b:
28:94:65:52:c5:d3:e3:4c:73:20:bb:de:1e:71:e4:
01:d6:82:ca:5b:54:f0:ec:52:72:cd:24:00:c2:7a:
9f:08:ab:fc:40:79:83:71:9d:48:5c:ab:ed:d4:52:
94:c4:80:8a:f3:68:07:76:69:cb:e4:b3:e9:87:50:
83:9f:c2:86:2c:ff:3e:f7:fb:c0:e7:c6:39:72:0a:
0c:bb:83:17:12:de:8a:50:1a:66:fa:71:ba:e9:85:
26:0c:ab:5c:5a:a1:1e:2d:a4:da:3a:2d:7e:50:2b:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A7:E3:24:FF:27:6F:36:02:F5:E9:3B:2D:20:A0:67:86:E0:A2:08
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:21:4c:e1:3e:af:72:82:6b:55:dd:4e:76:e8:19:da:d4:aa:
b7:a8:fb:ce:4d:ba:d9:a6:bc:1a:ca:ec:be:8b:1f:73:ae:94:
43:7d:f4:01:72:45:64:e3:75:9f:da:96:67:67:e4:61:47:26:
7d:ea:30:05:16:6e:43:84:c4:f2:e7:25:09:d6:7a:d4:1e:18:
d0:ed:92:2d:f2:27:4f:22:6d:83:3d:59:92:c8:d3:30:f5:99:
c2:a1:a1:2f:44:e1:40:ab:f0:ae:b1:5b:03:a4:8e:d6:ad:d4:
ff:7a:85:a6:cf:ba:a2:18:17:37:be:98:f8:a6:b6:39:4d:98:
f2:eb:89:ed:1b:89:1e:46:b2:8f:b9:08:43:c5:99:68:21:d3:
ea:60:fb:55:ab:ff:64:17:43:97:1c:d2:e0:f3:94:7b:29:21:
4c:14:6e:ca:45:f1:2c:d7:75:de:be:8d:37:85:06:ee:d3:81:
47:b1:8d:74:5b:16:ee:b7:2e:2e:ac:30:9c:a4:bb:3b:03:a3:
3a:97:b1:c5:40:66:7c:e3:66:7f:9b:57:9b:c2:0d:f2:14:ea:
5e:8f:5a:de:4c:b8:97:e7:a2:eb:64:8f:a0:5c:12:19:30:7f:
11:7c:70:31:fe:0a:b8:a4:d4:ae:0c:e4:f8:ac:f5:0d:f7:98:
51:c2:e6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8XJlFpCjnwgEzMFgp/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzNiOGI1ZjM3ZTIxMDY4MjUwNTcxZjRkYjgzYjQ3MTQ0
NjhhMmMwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EyhkZWE3ZTMyNGZmMjc2ZjM2MDJmNWU5M2IyZDIwYTA2Nzg2ZTBhMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4xaMg6vSP8NlTUK9kXh6GVlE49b
N6lJjxjtxxUn65K8u+nvzR9wJoO5ozpdRmlJr2uQ4S2Yadb8m7dzkqU3+0zFvjHB
lYBa6j7Biw+UrrJwtbt7+zbHbuXVTVKlVK8QK6ljyORMOy4kIVP/vJa9jVnwWQN/
1zs6FXV46lEUBi3IrK9dfsM8etBZfyLYZHKiibGFGTsolGVSxdPjTHMgu94eceQB
1oLKW1Tw7FJyzSQAwnqfCKv8QHmDcZ1IXKvt1FKUxICK82gHdmnL5LPph1CDn8KG
LP8+9/vA58Y5cgoMu4MXEt6KUBpm+nG66YUmDKtcWqEeLaTaOi1+UCtXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6n4yT/J282AvXpOy0goGeG4KIIMB8GA1UdIwQY
MBaAFAbDuLXzfiEGglBXH024O0cURoosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEt
ZTZlZmZkM2NlZjMyLzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEtZTZlZmZkM2NlZjMy
LzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSFM4T6v
coJrVd1OdugZ2tSqt6j7zk262aa8Gsrsvosfc66UQ330AXJFZON1n9qWZ2fkYUcm
feowBRZuQ4TE8uclCdZ61B4Y0O2SLfInTyJtgz1ZksjTMPWZwqGhL0ThQKvwrrFb
A6SO1q3U/3qFps+6ohgXN76Y+Ka2OU2Y8uuJ7RuJHkayj7kIQ8WZaCHT6mD7Vav/
ZBdDlxzS4POUeykhTBRuykXxLNd13r6NN4UG7tOBR7GNdFsW7rcuLqwwnKS7OwOj
OpexxUBmfONmf5tXm8IN8hTqXo9a3ky4l+ei62SPoFwSGTB/EXxwMf4KuKTUrgzk
+Kz1DfeYUcLmTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:21 2025 by rpki-client